diff --git a/internal/vault/secrets.go b/internal/vault/secrets.go index 47b5b76..1655982 100644 --- a/internal/vault/secrets.go +++ b/internal/vault/secrets.go @@ -329,6 +329,7 @@ func (v *Vault) GetSecretVersion(name string, version string) ([]byte, error) { // Validate secret name to prevent path traversal if !isValidSecretName(name) { secret.Debug("Invalid secret name provided", "secret_name", name) + return nil, fmt.Errorf("invalid secret name '%s': must match pattern [a-z0-9.\\-_/]+", name) }